{"id":13845198,"url":"https://github.com/LittleBear4/OA-EXPTOOL","last_synced_at":"2025-07-12T01:32:01.249Z","repository":{"id":61572840,"uuid":"550848573","full_name":"LittleBear4/OA-EXPTOOL","owner":"LittleBear4","description":"OA综合利用工具，集合将近20款OA漏洞批量扫描","archived":false,"fork":false,"pushed_at":"2023-10-28T04:46:18.000Z","size":1047,"stargazers_count":1311,"open_issues_count":24,"forks_count":152,"subscribers_count":14,"default_branch":"main","last_synced_at":"2025-05-23T12:16:09.113Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/LittleBear4.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2022-10-13T12:31:21.000Z","updated_at":"2025-05-20T04:41:44.000Z","dependencies_parsed_at":"2023-10-28T05:26:30.744Z","dependency_job_id":null,"html_url":"https://github.com/LittleBear4/OA-EXPTOOL","commit_stats":null,"previous_names":[],"tags_count":6,"template":false,"template_full_name":null,"purl":"pkg:github/LittleBear4/OA-EXPTOOL","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LittleBear4%2FOA-EXPTOOL","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LittleBear4%2FOA-EXPTOOL/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LittleBear4%2FOA-EXPTOOL/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LittleBear4%2FOA-EXPTOOL/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/LittleBear4","download_url":"https://codeload.github.com/LittleBear4/OA-EXPTOOL/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/LittleBear4%2FOA-EXPTOOL/sbom","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":264923078,"owners_count":23683716,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:03:15.952Z","updated_at":"2025-07-12T01:32:00.528Z","avatar_url":"https://github.com/LittleBear4.png","language":"Python","funding_links":[],"categories":["Python","LLM分析过程"],"sub_categories":[],"readme":"# OA - EXPTOOL 漏洞利用框架\n\n### 公告\n 基本上可以说是另一种东西了，重新写了架构\n \n 1.操作模式灵感来源MSF，我很喜欢msf，所以用msf的交互模式来写\n \n 2.漏洞用YAML文件来验证\n \n 3.其实YAML更像nuclei，但我做了统一的规范化，调用方式用了另一种方法\n\n 4.其实还可以写其他的功能模块,后续再更新\n\n 5.这次删掉掉一些POC，选择的poc都是近两年的\n\n 6.有时候会抽空回来看看，事情比较多的情况下不及时回复可以加我好友沟通\n\n### 10月28号更新\n\n- 优化错误，产生的错误进行处理\n- 改正批量扫描的错误\n- 修复错误yaml\n- 更新漏洞：用友 致远 泛微\n- 增加结果输出 输出的内容为url 名字 漏洞详细链接\n- 增加http代理功能\n \n### 使用\n\n- 第一次使用脚本请运行pip3 install -r requirements.txt\n- 面板是所有参数了致远就输入 zyscan tab键有补全命令的功能\n- 进入后help就可以查看，操作和msf一样\n- 批量使用先进行set type file 改变对象类型 然后set value 文件名\n\n### 使用实例\n\n加载已定义的模块\n![example](static/show.jpg)\n\n在主界面用set xxx 来加载book中自义定文件夹中的yaml文件\n![example](static/show1.jpg)\n![example](static/show2.jpg)\n\n\n\n\n### YAML模板\n id: xxx #漏洞名称:必选项\n time: 'xxx' #纰漏时间:可选项\n \n info: #这里主要是漏洞的信息：都是可选项\n name: xxxxx #名称\n author: xxxxx #作者\n severity: high #漏洞等级\n description: xxxxxxx #描述信息\n reference: xxxx #参考链接\n\n http: 编辑请求\n - method: \n - POST #第一次请求方式 以此类推\n - GET #第二次请求方式\n path:\n - \"{{BaseURL}}/xxxxxxxxxxx\" #第一次请求路径 跟请求方式对应\n - \"{{BaseURL}}/xxxxxx\" #第二次请求路径\n body:\n - |\n \"xxxxxxxxx\" #有post是必选项 第一次post请求的主体\n Rheader:\n - Content-Type:application/x-www-form-urlencoded \u0026 Accept-Enco #第一次POST请求时的请求头，\u0026分隔开，可选项\n Gheader:\n - Cookie:session \u0026 Content-Type:application \u0026 Accept-Encoding:deflate # 第一次GET 请求头，\u0026分隔开，可选项\n \n matchers-condition: and #在最后一次请求后进行验证 所有条件为and或者or\n matchers: \n - type: word #key值 必选项\n part: body #验证的部分 可选项也可以是header和nuclei通用\n words: #key对应的内容\n - \"当前已登录了一个用户，同一窗口中不能登录多个用户\"\n - \"\u003ca href='/seeyon/main.do?method=logout'\"\n\n - type: status #这里对应的是请求的响应 \n status:\n - 200 \n \n extractors: #提取器 \n - name: \n - session #Gheader 中的session 上边Gheader中\n part: \n - Gheader # 提取的部分和赋值给Gheader\n time: #在第几次请求中进行提取\n - 1\n regex:\n - 'JSESSIONID=(.*)'\n\n\n如果有任何建议可以找作者联系。欢迎各位提供改进方案\n## 作者：西瓜麻辣烫\n\n联系方式/问题群聊：\n \n![vx](static/vx.jpg) ![ql](static/ql.jpg)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FLittleBear4%2FOA-EXPTOOL","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FLittleBear4%2FOA-EXPTOOL","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FLittleBear4%2FOA-EXPTOOL/lists"}